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hat is claimed is: 
1. A data usage controlling apparatus that 

(1) reads a type 1 key /from a storage unit and 

(a) main data, 

(b) an encrypted/ type 2 key produced by 
encrypting a type 2 Key using the type 1 key, and 

(c) encrypted condition information produced 
by encrypting condition information using the type 
2 key 

from a recording medium, 

(2) decrypts the encrypted condition information 

using the type 2 key, / and 

(3) controls usagq of the read main data based on the 
condition information, 

the data usage controlling apparatus comprising: 
first updating m4ans for updating the condition 
information in accordance with usage of the read main data; 



generating means 
accordance with the u 



r 



for generating a new type 2 key in 
age of the read main data; 



first encrypting means for encrypting the updated 
condition information 



replacing the encrypt 

itli 



using the new type 2 key and 
ed condition information on the 
recording medium witlft the encrypted updated condition 
information; 

means for updating the type 1 key in 
ccordance with the usage of the read 



second updating 
the storage unit in a 
main data; and 
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second encrypting means/ for encrypting the new type 
2 key using the updated type. 1 key and replacing the 
encrypted type 2 key on the/ recording medium with the 
encrypted new type 2 key. 

2. A data usage controlling apparatus that 

(1) reads a type 1 k^y from a storage unit and a set 
including 

(a) main data] 

(b) an encryp/ted type 2 key produced by 
encrypting a type 2 key using the type 1 key, and 

(c) encrypted condition information produced 
by encrypting condition information using the type 



2 key 



from a recording medium on which n (where n is 



an integer no les 
encrypted type 2 



3 than two) sets of main data, an 
key, and encrypted condition 



information are recorded, 



encrypted condition information 
■ and 

of the read main data based on the 



(2) decrypts the 
using the type 2 key, 

(3) controls usag^ 
condition information, 

the data usage controlling apparatus comprising: 

for generating a new type 2 key in 
of the main data; 

means for encrypting the condition 
new type 2 key and replacing the 



generating means 
accordance with usage 

first encrypting 
information using the 
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encrypted condition information on the recording medium 
with the newly encrypted condition information; 

decrypting means for decrypting all (n-1) encrypted 
type 2 keys on the recording medium that are not included 
in the read set using the /type 1 key; 

updating means for updating the type 1 key in the 
storage unit after the decrypting means has decrypted all 
(n-1) encrypted type 2 keys; and 

second encrypting means for encrypting the (n-1) type 
2 keys and the new type 2/ key using the updated type 1 key 
and replacing all n encrypted type 2 keys on the recording 
medium with the newly efncrypted type 2 keys . 

3. A data usage controlling apparatus in accordance with 
Claim 2, further comprising: 

second updating beans for updating the condition 



information in accordance with usage of the read main data, 
wherein the fir$t encrypting means encrypts the 



updated condition information using the new type 2 key and 
replaces the encrypted condition information on the 
recording medium witfti the encrypted updated condition 
information. 



4 . A data usage controlling apparatus in accordance with 
Claim 3, 

wherein the generating means generates a new type 2 
key every time a user! makes a predetermined number of uses 
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of the main data on the recording medium, and 

when the generating means has not generated a new type 
2 key, the first encrypting means re-encrypts the updated 



f me 



condition information using a same type 2 key as was used 
to decrypt the encrypted condition information. 
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5. A data usage controlli/ng apparatus in accordance with 
Claim 2, 

wherein the main d'ata in each set on the recording 
medium has been encrypt'ed using a type 3 encryption key, 

the data usage controlling apparatus further 
comprising : 

obtaining means for obtaining the type 3 encryption 
key; and j 

second decrypting means for decrypting the read main data 
lined t^pe 3 encryptic 



using the obta: 



.on key. 



oiling apparatus in accordance with 



6. A data usage contri 
Claim 2, 

wherein the ma^.n data in each set on the recording 

ypted using a type 3 encryption key 
e data usage controlling apparatus , 
controlling apparatus further 



medium has been enci 
that is unique to tfc 
the data usage 



comprising: 

storing means for storing the type 3 encryption key; 

and 

second decrypting means for decrypting the read main data 
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lcryption key, 



using the stored type 3 e 



7 . A data usage controlling apparatus in accordance with 
Claim 2, / 

wherein the updatin'g means updates the type 1 key by 
performing a predetermined calculation on the read type 
1 key. 

8 . A data usage controlling apparatus in accordance with 
Claim 2, 

wherein the updating means updates the type 1 key by 
adding one to the readj type 1 key. 

9. A data usage controlling method that 

(1) reads a typej 1 key from a storage unit and 

(a) main data, 

(b) an encjrypted type 2 key produced by 
encrypting a type 2 key using the type 1 key, and 

(c) encrypted condition information produced 
by encrypting condition information using the type 
2 key 

from a recording medium, 



(2) - decrypts the encrypted condition information 
using the type 2 key, and 

(3) controls usage of the read main data based on the 
condition information, 

the data usage controlling method comprising the 
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15 f ollowing\ steps : 

16 updating the condition information in accordance 

17 with usage! of the main data; 

18 generating a new type 2 key in accordance with the 

19 usage of tne main data; 

20 encrypting the updated condition information using 

21 the new typ4 2 key and replacing the encrypted condition 

22 information Ion the recording medium with the encrypted 

23 updated condition information; 

24 updating the type 1 key in accordance with the usage 

25 of the main data; and 

2 6 encrypting the new type 2 key using the updated type 

27 1 key and replacing the encrypted type 2 key on the 

28 recording medium with the encrypted new type 2 key. 

\ . 

1 10 . A computer-keadable recording medium storing a program 

2 that I 

3 (1) reads! 

4 a type 1 key from a storage unit and 

5 (a) main data, 

6 (b) ah encrypted type 2 key produced by 

7 encrypting la type 2 key using the type 1 key, and 

8 (c) encrypted condition information produced 

9 by encrypting condition information using the type 

10 2 key \ 

11 from a \recording medium, 

12 (2) decrypts \the encrypted condition information 
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using the type 21 key, and 

(3) controls usage of the read main data based on the 
condition information, 

the program ilncluding instructions for executing the 
following processes: 

updating the decrypted condition information in 
accordance with u$age of the main data; 

new type 2 key in accordance with usage 



generating a 
of the main data; 

encrypting t 
the new type 2 key 
information on th$ 
updated condition 

updating the 



he updated condition information using 
and replacing the encrypted condition 
recording medium with the encrypted 
information; 

type 1 key in accordance with usage of 



the main data; and 

encrypting the new type 2 key using the updated type 
1 key and replacing the encrypted type 2 key on the 
recording medium wiith the encrypted new type 2 key. 
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